Version: 7.22beta1
Development154 changelog entries across 44 component(s)
2026-Jan-02 (4 months ago)
| Component | Change |
|---|---|
| bgp | fixed early-cut not working properly; |
| bgp | implement multipath (ability for BGP best path to select ECMP routes); |
| bgp | implement revised input error handling per RFC 7606; |
| bridge | added local and static MAC synchronization for MLAG; |
| bridge | added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss); |
| bridge | added MLAG-specific aged and aged-peer flags to host table; |
| bridge | added RA guard feature; |
| bridge | fixed MAC moving between regular ports and bonds for MLAG; |
| bridge | fixed MLAG state being permanently disabled when changing bridge interface settings; |
| bridge | improved MAC synchronization for MLAG; |
| certificate | improved certificate export process; |
| certificate | improved logging; |
| console | added :continue and :break commands for various loops; |
| console | added :exit command to terminate scripts; |
| console | added "comments" parameter to print command to control comment and error output; |
| console | added comparison operators for ID values; |
| console | added Ctrl+Left/Right word navigation; |
| console | added Ctrl+w word deletion; |
| console | added hint for dry-run import parameter; |
| console | allow undefined variables in dry-run import; |
| console | changed autocomplete expansion criteria; |
| console | disable follow command in /ip/firewall/connection menu; |
| console | fixed brief print for entries with multiple comments; |
| console | fixed setting of /interface/wireless/scan-list; |
| console | fixed value type names in comparison errors; |
| console | implement string casting in :tobool command; |
| console | improved error tracing when using find command; |
| console | improved set/remove command handling in /file menu; |
| console | look up variable in global scope if argument scope lookup failed; |
| console | parse width parameter for non-interactive SSH commands; |
| console | show smaller QR codes where possible; |
| container | added jupyter-notebook, livebook and myip apps; |
| container | added support for zstd extraction; |
| container | internal stability improvements; |
| detnet | added request-interval setting; |
| detnet | changed default port from MNDP to a random unused UDP port; |
| dhcp-server | improved failure/error logging for both IPv4 and IPv6; |
| dhcpv4-client | fixed inability to reference disabled DHCP client by interface name; |
| dhcpv4-client | request DOMAINNAME (15) option from the server; |
| dhcpv4-server | improved DHCP option handling; |
| dhcpv4-server | improved logging; |
| dhcpv4-server | send all found lease options in reply to DHCPINFORM; |
| dhcpv6-client | allow unsetting "pool-prefix-length" parameter; |
| dhcpv6-client | improved log messages; |
| dhcpv6-server | swap input and output RADIUS accounting statistics counters; |
| disk | show if driver is encrypted and locked; |
| fetch | added HTTP/2 support on ARM64 and x86/CHR devices; |
| fetch | increased default maximum redirect count to 2; |
| fetch | return error code and HTTP headers to :onerror script; |
| fetch | treat HTTP 304 return code as success; |
| firewall | clear relevant masqueraded connection tracking entries on WAN address change; |
| hotspot | allow WireGuard interface type; |
| hotspot | do not invalidate static ARP entries; |
| hotspot | fixed www response after login by cookie; |
| iot | improved LoRa FSK modulation downlinking; |
| ipsec | added "none" option to IPsec key QKD certificate field; |
| ipsec | added IKEv2 DDoS cookie activation setting; |
| ipsec | added logging for IPsec policy template group; |
| ipsec | added logging of IKEv2 connection SPI and initiator address; |
| ipsec | adjusted minimum generated PSK key length; |
| ipsec | fixed IKEv2 child policy reqid lost on rekey; |
| ipsec | fixed IKEv2 child reqid handling on traffic selector update; |
| ipv6 | added dhcp6-pd-preferred to /ipv6/nd/prefix to control P flag in Prefix Info Option RFC 9762; |
| ipv6 | delete SLAAC default route if there are no active SLAAC prefixes present and no new RAs received; |
| ipv6 | enable IPv6 fast-path after removing firewall rules; |
| log | added option to clear echo logs; |
| log | added option to prepend topics to BSD syslog message; |
| log | added script target for log actions; |
| log | fixed incorrect log message shown after canceling supout.rif creation; |
| log | fixed minor spelling issues; |
| log | fixed missing ID in trace logs after removing logging rule; |
| log | log "Secret must be set to run scripts from SMS" error only if ":cmd" prefix is used in SMS message; |
| log | use uppercase MAC address in firewall logging; |
| lte | added "auto" MTU option for LTE interfaces to use network-advertised MTU on supported devices; |
| lte | added multi-apn and framed routing support for EC200A-EU modem (requires latest FW version); |
| lte | added USB tethering support using iOS devices; |
| lte | clear about field status on firmware upgrade; |
| lte | do not flap LTE passthrough assigned interface on modem link state change; |
| lte | do not reconfigure LTE interface on configuration change error; |
| lte | fixed changing MAC address for EC200A-EU modem; |
| lte | fixed eSIM errors appearing on devices without eSIM support; |
| lte | fixed firmware update and status refresh for R11eL-EC200A-EU modem; |
| lte | fixed LTE interface IPv6 address generation to use EUI-64 for EC25-EU&KNe; |
| lte | improved APN IP type handling by enabling only the IP protocols defined in the assigned APN profile for config-less modems; |
| lte | make inactive LTE interface settable, LTE interface settings can be set without waiting for modem initial initialization; |
| lte | removed delay before querying modem status for config-less modems with info channel; |
| mac-telnet | added interface property; |
| macsec | fixed hardware offload on S53 and C53 devices; |
| mesh | fixed missing S flag on interfaces after mesh disable/enable; |
| ping | added IPv6 support for flood-ping; |
| poe-out | added LLDP support for dual-signature PDs; |
| poe-out | firmware update for 802.3at capable boards (the update will cause brief power interruption to poe-out interfaces); |
| poe-out | firmware update for 802.3bt capable boards (the update will cause brief power interruption to poe-out interfaces); |
| ppp | fixed Framed-Route attribute not being applied to correct VRF; |
| ppp | fixed premature PPP client disconnect on BG77 modems during firmware update; |
| rose-storage | added XFS support; |
| route | added logs for check-gateway state changes; |
| route | expose built-in routing rules and allow changing their order under the /routing/rule menu; |
| route | fixed route removal after unexpected safe mode termination; |
| routerboot | allow installing ARM64 on L009 device ("/system routerboard upgrade" required; configure "/system/routerboard/settings set preferred-architecture=arm64"; then install ARM64 with Netinstall; downgrading to older versions must be avoided); |
| routerboot | fixed linking to 1000M-half for KNOT Embedded LTE4 ("/system routerboard upgrade" required); |
| routerboot | fixed possible Netinstall failure for KNOT Embedded LTE4 ("/system routerboard upgrade" required); |
| sfp | improved initialization and linking for some QSFP modules; |
| smips | reduced package size and removed ip-scan, mac-scan, ping-speed, flood-ping features; |
| snmp | fixed issue where bulk walk might skip the first OID; |
| supout | wait up to 5 minutes for export to complete and show incomplete output in case of timeout; |
| switch | fixed missing switch-cpu port counters; |
| switch | updated switch-marvell.npk driver; |
| undo | show user when configuring DHCP server or hotspot with setup command; |
| upgrade | added "password" parameter to "local-upgrade" feature when configuring through CLI; |
| upgrade | added IPv6 support for local package source and mirror; |
| upgrade | fixed local package mirror check interval; |
| upgrade | removed redundant commands from local package menu; |
| usb | updated device ids for ax88179_178a driver; |
| w60g | fixed possible memory leak when an interface is disabled; |
| webfig | added new section "Common names" in skin designer; |
| webfig | added support for collapsible tree view for menus like Interfaces, Files, Queues; |
| webfig | added support for URL fields; |
| webfig | fixed ability to set interworking.realms-raw WiFi interface attribute; |
| webfig | fixed skin designer mobile view for QuickSet and Terminal; |
| webfig | fixed Torch Filters default values; |
| webfig | improved address type field input value validation; |
| wifi | added keepalive message in CAPsMAN data channel; |
| wifi | allow specifying hostname to caps-man-addresses; |
| wifi | fixed channel switching for MediaTek access points; |
| wifi | fixed FT support with wpa2-psk-sha2; |
| wifi | fixed possible certificate failure after CAPsMAN disable/enable; |
| wifi | improved spectral-history width for console; |
| wifi | improved stability and fixed multiple issues; |
| wifi | improved support for 802.11be access points; |
| wifi | improved system stability when using spectral-scan; |
| winbox | added "Force Check" for local upgrade; |
| winbox | added comment in "System/Ports/Remote Access" menu; |
| winbox | added GUI support for IPsec QDK; |
| winbox | added missing LoRa channel fields; |
| winbox | added warning when changing global script variables; |
| winbox | allow using specified skin without the sensitive policy; |
| winbox | fixed applying a skin to a user authenticated with RADIUS; |
| winbox | fixed applying a skin to WinBox if it was uploaded via the branding package; |
| winbox | fixed default flag in certain menus; |
| winbox | fixed Preshared Key "auto" and "none" options for WireGuard Peer; |
| winbox | make File Share URL field clickable; |
| winbox | recognize imported certificate key size; |
| winbox | rename "Change Now" to "Change" button in "System/Password" menu; |
| winbox | replace "DHCP" with "DHCPv6" in IPv6 menus; |
| winbox | show warnings in "MPLS/Traffic Eng/Tunnel" menu; |
| winbox | updated various WiFi properties; |
| wireguard | merged upstream fixes and improvements; |
| wireless | avoid joining BSS that previously failed until all other options tried; |
| wireless | improved system stability when changing nstreme mode; |
| wireless | improved system stability when eap-method=passthrough configured for station; |
| x86 | added JME network driver; |
| x86 | fixed interface hang on RTL8125 when processing IP-fragmented UDP traffic; |
| x86 | improved link establishing on Intel X710 series NIC; |